Open Source Vulnerabilities

tecnickcom/tcpdf, fooman/tcpdf, la-haute-societe/tcpdf, spoonity/tcpdf

TCPDF vulnerable to attackers triggering deserialization of arbitrary data

commons-jxpath:commons-jxpath

Withdrawn: CVE Rejected: JXPath vulnerable to remote code execution when interpreting untrusted XPath expressions

org.hsqldb:hsqldb

HyperSQL DataBase vulnerable to remote code execution when processing untrusted input

commons-jxpath:commons-jxpath

JXPath Out-of-bounds Write vulnerability

commons-jxpath:commons-jxpath

JXPath Out-of-bounds Write vulnerability

commons-jxpath:commons-jxpath

JXPath Out-of-bounds Write vulnerability

commons-jxpath:commons-jxpath

JXPath Out-of-bounds Write vulnerability

commons-jxpath:commons-jxpath

JXPath Out-of-bounds Write vulnerability

rdiffweb

rdiffweb allows a new password to be the same as the previous password

rdiffweb

rdiffweb does not have a rate limit on incorrect password attempts to prevent brute force attacks

rdiffweb

rdiffweb Path Traversal vulnerability

yetiforce/yetiforce-crm

YetiForce CRM vulnerable to stored Cross-site Scripting

moodle/moodle, moodle/moodle

Moodle Cross-Site Request Forgery (CSRF)

hsqldb, hsqldb, hsqldb

lighttpd, lighttpd, lighttpd

lighttpd, lighttpd, lighttpd, lighttpd, lighttpd, lighttpd, lighttpd, lighttpd, lighttpd, lighttpd

hsqldb, hsqldb, hsqldb, hsqldb, hsqldb, hsqldb, hsqldb

libcommons-jxpath-java

lighttpd, lighttpd

asterisk, ring

pjproject, pjproject, pjproject, pjproject, pjproject, pjproject, pjproject

asterisk, ring

pjproject, pjproject, pjproject, pjproject, pjproject, pjproject, pjproject

golang-github-sylabs-sif, golang-github-sylabs-sif, golang-github-sylabs-sif